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Quantum teleportation uses prior entanglement and forward classical communication to transmit 
one instance of an unknown quantum state. Remote state preparation (RSP) has the same goal, but 
the sender knows classically what state is to be transmitted. We show that the asymptotic classical 
communication cost of RSP is one bit per qubit — half that of teleportation — and even less when 
transmitting part of a known entangled state. We explore the tradeoff between entanglement and 
classical communication required for RSP, and discuss RSP capacities of general quantum channels. 



A principal goal of quantum information theory is un- 
derstanding the resources necessary and sufficient for in- 
tact transmission of quantum states. In quantum telepor- 
tation |jj an unknown state is transmitted from a sender 
("Alice") to a receiver ("Bob") using classical commu- 
nication and prior entanglement. Two bits of forward 
classical communication and one ebit of entanglement 
(a maximally entangled pair of qubits) per teleported 
qubit are both necessary and sufficient, and neither re- 
source can be traded off against the other. In remote 
state preparation (RSP) the goal is the same — for Bob 
to end up with a single specimen of a state — but here Al- 
ice starts with complete classical knowledge of the state. 

Pati H and Lo j|] showed that for special ensembles 
of states (e.g. qubit states on the equator of the Bloch 
sphere) RSP requires less classical communication than 
teleportation, but Lo conjectured that for general states 
the classical communication costs of the two tasks would 
be equal. Here we show that, in the presence of a large 
amount of prior entanglement, the asymptotic classical 
communication cost of RSP for general states is one bit 
per qubit, half that of teleportation. Most of this en- 
tanglement is not destroyed, but, as we will show, can 
be recovered afterward using backward classical commu- 
nication from Bob to Alice, a resource that is entirely 
unhelpful for teleportation. 

We show that RSP is unlike teleportation in that it 
exhibits a nontrivial tradeoff between classical communi- 
cation and entanglement, the classical cost of preparing 
a generic qubit state ranging from one bit in the high 
entanglement limit to infinitely many without prior en- 
tanglement (if any finite classical message, say of k bits, 
sufficed, Bob could use that message to make infinitely 
many copies, determine the state's amplitudes to more 
than k bits precision, and thereby violate causality). 

We introduce two new kinds of channel capacity, re- 
flecting a general quantum channel's asymptotic ability 
to be used for remote state preparation, with or with- 
out prior entanglement, and relate these capacities to the 
regular quantum and classical capacities with or without 
prior entanglement. Finally, we discuss remote prepara- 



tion of states entangled between Alice and Bob. 

RSP in the high-entanglement limit: To see how 

a large amount of shared entanglement enables general 
states to be remotely prepared at an asymptotic cost of 
one bit per qubit, it is helpful first to consider an exact 
(non-asymptotic) RSP protocol for the special ensemble 
mentioned earlier: equatorial states. Assume Alice and 
Bob share a number of singlets, i.e. pairs of qubits in the 
state |\& _ ) = 1 01) — 1 10) (we will often omit the normal- 
ization 1/V2). To remotely prepare an equatorial state 
\ip) = |0) + e l ^|l), Alice takes one of her singlets and 
measures it Q in the basis (ip, ip- 1 ) where tp 1 - denotes 
the antipodal (orthogonal) state to ip. If the outcome 
is ^ she knows (by the properties of the singlet state) 
that Bob's remaining half of the singlet is in the desired 
state ip. But equally often Alice's outcome is ip, leaving 
Bob with ip- 1 , the antipode of the state Alice wished to 
prepare. For equatorial states, Bob can correct ip 1 - to ip 
by applying the Pauli operator a z , a 180 degree rotation 
about the z axis. Thus Alice can remotely prepare an 
arbitrary equatorial state known to her by measuring a 
shared singlet in the basis determined by that state, and 
sending Bob the one-bit measurement result, which tells 
him whether to apply a z . But for general, non-equatorial 
states, the corrective transformation ip — > ip is antiuni- 
tary, and Bob cannot perform it by any physical means. 

Now suppose Alice wishes to remotely prepare a large 
number of general qubit states ipi, ip%, . . . , ip n , and that 
she and Bob share an unlimited supply of singlets. For 
each j = l...n, Alice measures m = 2™ +logn of her sin- 
glets in the basis {ipj,tpj}, and stores the results as one 
row of annxra table T, writing T(j, k) = 1 for a success 
(meaning Bob's half of that singlet is in the desired state 
ipj) and T(j,k) = for a failure (meaning Bob's half is 
in the antipodal state ipj-). Alice does all this without 
telling Bob anything, obtaining a large table of ran in- 
dependent random zeros and ones. When she is done 
making all the measurements, she looks for a column of 
all ones, and uses n+logn bits to tell Bob its index. Bob 
keeps the states in the successful column and discards all 
the others. If (with probability o(l)) no successful col- 



umn exists, Alice tells Bob so, then uses n more singlets 
and 2n classical bits to simply teleport the states to Bob. 
Thus 1 bit per qubit is asymptotically sufficient for RSP; 
it is also necessary || by causality. 

This protocol can be generalized from qubits to states 
in a <i-dimensional Hilbert space, allowing them to be 
remotely prepared at an asymptotic classical communi- 
cation cost of log 2 d bits per state. Instead of singlets, 
Alice and Bob use maximally entangled pairs of the form 

\*5) = I 00 ) + I 11 ) + ■ • • + |(d-l)(d-l)>. Alice and Bob 
prearrange mn such states with m^$>d n in an array of n 
rows and m columns. For each row j, Alice measures her 
halves of the pairs in a basis including 0*, the complex 
conjugate of the state she wishes to remotely prepare. If 
(with probability 1/d) her measurement outcome is 0*, 
Bob's half of the entangled pair will be left in the desired 
state i/jj, and Alice enters a 1 in her success/failure table; 
otherwise she enters a 0. 

The high-entanglement RSP protocol described above 
uses a large number of ebits, approximately 2™ per state 
sent if n qubits are transmitted. But, using back com- 
munication, this protocol can be modified so that only a 
constant number of ebits are needed per state transmit- 
ted, while still only requiring one classical bit. To achieve 
this, we first (following a suggestion of A. Ambainis) di- 
vide the n states to be transmitted into subblocks of size 
s; s — > oo as n — > oo, but 2 s /n — > 0. Within each sub- 
block the basic scheme described above is followed. But 
instead of performing a separate von Neumann measure- 
ment on her half of each of the ebits, Alice does a less 
intrusive measurement: for each set of s ebits constitut- 
ing a column in her table, she performs a two-outcome in- 
complete von Neumann measurement. The "1" outcome, 
obtained with probability 2~ s , signals that all Bob's par- 
ticles are in the desired state Uj =1 \ipj); the "0" outcome 
signals all other possibilities. The joint state remaining 
between Alice and Bob when "0" is obtained, po, is still 
highly entangled, and pure entanglement can be recov- 
ered from it by distillation. From Bob's viewpoint the 
state po is mixed, because he does not know the bases of 
Alice's measurements. Averaging over all such bases, the 
diagonal elements of po m the generalized Bell basis are: 

(^0|B)^|^^ + Q) S r ¥ ^ T y (1) 

where \B) is any tensor product of Bell states = 
|00) ± |11),* ± = |01) ± 1 10) > containing r instances of 
<I> + and s—r instances of the other Bell states. Alice and 
Bob collect all these po states until s' RSPs have been 
performed, with s<s'<n; at this point they have about 
c = s'2 s /s copies of po. They then perform an entangle- 
ment distillation procedure. After dephasing in the Bell 
basis (which can be accomplished by a twirling Q per- 
formed by Alice and Bob) , the state pf c can be approxi- 
mated, using a typical subset, by an equal mixture of 2 
different products of Bell states. Here the von Neumann 
entropy of the twirled po is S = s2~ s (2 + | log 3). By 



the random-hashing technique [Q, c(s — S) pure singlets 
can be distilled from this mixture with the help of back 
communication from Bob to Alice. Counting also the 
one pair consumed when the successful "1" outcome is 
obtained, the number of ebits consumed per state trans- 
mitted becomes eo = 1 + cS/s' = 3 + \ log 3 w 3.79. This 
point (eo, b — 1) is labelled R in Fig. 1. 
More restricted protocols and Lo's conjecture: 
For any set of n states to be remotely prepared, the above 
protocols are exactly faithful, i.e. always work, reproduc- 
ing exactly the desired output even for finite n, but only 
asymptotically efficient, since the expected classical com- 
munication approaches one bit per qubit only in the limit 
of large n, while for any finite n, there is some chance 
that the classical communication cost will exceed that 
required for teleportation. We know of no exactly faith- 
ful RSP protocol for finite n that always uses less classical 
communication than would be required by teleportation. 
In this sense Lo's conjecture still stands. 

In a more restricted setting we can prove Lo's conjec- 
ture. Suppose Alice wants to remotely prepare a single 
quantum state in a rf-dimensional Hilbert space (for 
simplicity d is a power of 2) for Bob. As in telepor- 
tation, we restrict Bob to performing a unitary trans- 
formation on some system in his lab determined by the 
classical data he receives from Alice. Also, as in telepor- 
tation, we require that the probability that Alice sends 
message i to Bob not depend on the state that she is 
remotely preparing. If such a protocol is exactly faith- 
ful, we can show that it must use at least 2 log d classical 
bits of communication from Alice to Bob, as in telepor- 
tation. The argument is as follows. Let k be the num- 
ber of classical bits that Alice sends to remotely prepare 
0. We will have Bob guess this data. He infers from 
the protocol that he will get message i (i — 1, . . . , 2 k ) 

with probability pi (^2 i=1 Pi = 1). Thus he flips a coin 
with bias pi and he implements the corresponding uni- 
tary transformation in his lab. Since the protocol only 
allows him to carry out unitary transformations, guessing 
wrong means that instead of getting \ip) he will obtain 
U\ip) where U is some unitary transformation. The total 
probability p of Bob guessing correctly is given by the 
sum over i of the probability that Alice sends i and Bob 
correctly guesses i, which is J2iPi — 2~ k J2iPi = 2~ k . 
Alice and Bob have thus created a channel S which acts 
upon the state in Alice's lab and outputs the state 
p = S(|0)<0|) = p|0)<0| + (1 " P)<Swrong(|0><0|) where 
p > 2 k . Since Bob used zero communication to make 
this state, it must be that 

f(S) = I d0 (0| S(|0}(0|) |0) < ~ (2) 

If not, Alice and Bob would have created a superlumi- 
nal channel. We can use a result by the Horodeckis 
H which relates f(S) to the maximally entangled frac- 
tion F(S) = ($+| (1 ® S)(|3+)<#+|) |$+), i.e. f(S) = 
(F(S)d + l)/(d + 1). Since S is the identity operator 



with probability larger than or equal to 2 k we have 
f(S) > (2- k d+l)/(d+l) > 1/dforfc < 2 log din contra- 
diction to (||). Thus in a very restricted "teleportation" 
type of RSP, Lo's conjecture still holds. Besides being 
exactly faithful, this restricted protocol is oblivious; Bob 
receives no additional information about ip other than 
the state ip itself. This is due to the fact that the proba- 
bility with which Alice sends a classical message does not 
depend on the state -ip- I n the high-entanglement RSP 
protocol, by contrast, Bob can gain some additional in- 
formation about ip by measuring the singlets in the un- 
successful columns instead of recycling them. Perhaps 
Lo's conjecture holds for all oblivious, exactly faithful 
protocols. 

For the next two sections we relax the requirement of 
exact fidelity, requiring only that protocols be asymptot- 
ically faithful, i.e. for any set of n input states, they 
should produce an approximation to the desired output 
tpi <S> ip2 ® ■ ■ ■ ® 4>n whose fidelity approaches 1 in the limit 
of large n. This definition has the advantage of allowing 
RSP to be composed with other asymptotically faithful 
processes such as Schumacher compression ||. 
Low-entanglement RSP: Here we bound the forward 
classical communication b needed to remotely prepare 
qubit states using entanglement e < 1 ebit per qubit. 
To do so, Alice sends Bob some classical information 
about the states ipi...ip n , so as to reduce their poste- 
rior von Neumann entropy from his viewpoint and al- 
low her to teleport them using < 1 ebit per qubit. For 
example, a qubit uniformly distributed over a circular 
cap Cg of radius < it and area A(0) = 27r(l — cos0) 
centered on the north pole has von Neumann entropy 
5(0) = i?2((l — cos0)/4) < 1 and can be teleported at an 
asymptotic cost of 25(0) bits and 5(0) ebits. 

First assume the states ip\...ip n are uniformly dis- 
tributed (a restriction we later remove). For each block 
length n and cap radius 0, suppose Alice and Bob have 
agreed on an n by m — n^An / A(0)) n array of random ro- 
tations R(i, j),i = l...n, j=l...m. Then, given the states 
tpi...ip n , Alice constructs a success/failure table where 
a success, T(i,j) — 1, is counted iff the rotated state 
R(i,j)ipi falls within the standard cap Cg. As before she 
looks for an all-successful column, and uses an expected 
5'(0) +o(l) bits per state, where 5'(0) = log 2 (47r/A(0)), 
to tell Bob its index j. Finally she Schumacher com- 
presses the states in the successful column and teleports 
them, at an additional asymptotic cost of 25(0) bits and 
5(0) ebits per state, to Bob, who rotates the them back 
into their original positions. If there is no successful col- 
umn, Alice teleports the states directly, without com- 
pression; but this happens so rarely as to not increase 
the asymptotic entanglement and communication costs, 
e = 5(0) and b = 5'(0) + 25(0). The R rotations need 
not actually be random: for each n and 0, there always 
exists a deterministic set of rotations which performs no 
worse than average on uniformly distributed tpi . We use 
D(i,j) to denote these deterministic rotations. 

To make the protocol work on arbitrary sequences of 



states, even ones maliciously chosen to avoid successes 
with the particular rotations {D(i,j)} Alice and Bob 
are using, Alice divides the states into subblocks of size 
s sa y/n, and applies the above protocol separately to 
each subblock, but before doing so applies a set of s 
random prerotations r\,...r s which Bob removes after- 
ward, to the states in each subblock. Then, even if the 
original states ipi are awkwardly located, the random- 
ized states Ti mo d s ipi will be random within each sub- 
block. Reusing the prerotations causes the deviations 
of the actual mixed-state output from the ideal ipi...ip n 
to be correlated between subblocks, but because of the 
exponentially fast convergence of Schumacher compres- 
sion with increasing subblock size, the full ro-fold fidelity 
still approaches unity in the limit n— > oo, for any se- 
quence ipi...ip n of states to be remotely prepared. Of 
course Alice must tell Bob the prerotations ri...r s so 
he can remove them at the end. If the prerotations 
are described with precision, say, y/s bits, the finite- 
precision errors will vanish exponentially rapidly, while 
keeping the communication overhead sublinear in n. 
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FIG. 1. Entanglement (e) and forward classical communi- 
cation (6) costs of remotely preparing qubit states in vari- 
ous ways, including teleportation (T) , our high-entanglement 
method with entanglement recycling (R), and convex com- 
binations (solid line between T and R). The shaded region 
b < 1 is inaccessible because it would violate causality. Solid 
curve below and right of T is our low-entanglement method 
and convex combinations with teleportation. Dashed curve is 
Devetak-Berger method. 

Recently Devetak and Berger introduced an im- 
proved protocol which they prove optimal among low- 
entanglement RSP methods that use a classical message 
followed by teleportation to remotely prepare states uni- 
formly distributed on the Bloch sphere. Shown as the 
dashed curve in Figure 1, their method is like our low- 
entanglement methods, but instead of the index of the 
first successful column, Alice tells Bob the index of the 
column whose states, viewed as a finite ensemble, have 
least entropy. 

RSP Capacities of Quantum Channels: Our results 
suggest new kinds of capacity for a general noisy quan- 
tum channel, expressing its asymptotic ability to send 
known states, with or without the help of prior shared 
entanglement. For any channel Af we define the RSP ca- 



pacity (which might depend on the dimension d of the 
Hilbert space Hd) as 



R^(Af) = limlimsup {'-^- : 3^,. V, 



® . .. ® ^„,P m „^ m f m „) > 1-e }, (3) 



where £ mn denotes a possible block encoder used by Al- 
ice, using n classically described states ip\ , . . . , ip n to pre- 
pare an input to the quantum channel TV®" 1 (i.e. m 
parallel instances of Af); similarly T> mn denotes a pos- 
sible block decoder used by Bob, mapping the m channel 
outputs to some approximation of the state to be re- 
motely prepared; and F{tp\ ® ... ® 4>n,'D mn Af® m £ mn ) 
denotes the fidelity of this approximation [the fidelity of 
a pure state \? under linear map M. is naturally defined 
as F(ty,M) = Tr^M^)]. The entanglement-assisted 
RSP capacity Re(J\T) is defined similarly, except that the 
encoder and decoder share unlimited prior entanglement. 

Clearly, for any channel, < C, since the classical 
capacity C may be viewed as the channel's ability to 
remotely prepare classical states (i.e. orthogonal states in 
some basis). On the other hand, R^ > Q, the quantum 
capacity, since the efficiency of transmitting known states 
must be at least that of transmitting unknown states. 

In the entanglement-assisted setting, we can show that 
Re is independent of d and equal to Ce, the channel's 
entanglement-assisted classical capacity ||. This follows 
from the fact that logd bits of classical communication 
are asymptotically both necessary and sufficient to re- 
motely prepare a general d-dimensional state. 

Without entanglement, there are channels for which 
i?( 2 ) > Q, for example a strongly dephasing qubit channel 
with C — 1 and < Q <C I . Given any point (e, b) on 
the dashed curve in Fig. 1, such a channel can be used 
7i times to share « Qn ebits and another n times to 
transmit n classical bits, giving > min{<5/2e, 1/26} 
asymptotically; hence R^/Q > l/2e for small enough 
Q. On the other hand, R^=0 for any purely classical 
channel (i.e. one with Q—0), by causality. 
Remote Preparation of Entangled States: Like 
teleportation, RSP can be applied not only to pure states, 
but also to parts of entangled states. However, unlike 
teleportation, RSP requires less classical communication 
to prepare an entangled state in Ha where Ha re- 

mains in Alice's lab, than to prepare a pure state in Hb- 
To take an extreme example, the standard maximally en- 
tangled state in d X d dimensions can be converted 
into any other maximally entangled state in d X d di- 
mensions with no classical communication at all, because 
maximally entangled states are interconvertible by local 
unitary operations of Alice. Suppose more generally that 
Alice and Bob share an unlimited supply of ebits, and 
that Alice wants to prepare a state tp g Ha ®Hb, which 
is known to her. We assume both Hilbert spaces have 
dimension d; if necessary the smaller can be extended to 
make this so. Any state %j) € Ha <8> Hb can be written in 
Schmidt form as — Yli=i V^~i\ a i)®\bi), where some of 



the Xi may be zero. We give a probabilistic procedure by 
which Alice can convert the standard state $J into the 
desired ip with success probability 1/d if ip is separable 
and greater than 1/d if ip is entangled. 

Alice begins by bringing the standard state to the form 
Ua\$j ) = \<f>) = Ya=i K) ® \ b i) by means of a local 
unitary transformation U a- She then performs a local 
filtering operation on it, which can be described by a 
positive-operator-valued measure with two elements, Hi 
(success) and n (failure), the resulting state in each case 

being {^JWj®!} \4>). HerewetakeHi = Yli=i ^il a ;)( a il 
and n = / — IIi, where A = max{Ai}. Success, which 
leaves the system in the desired state tp, occurs with prob- 
ability KVEIi <8 I)\4>)\ 2 — l/(A<f), which is greater than 
1/d if -0 is entangled. This procedure is exactly faithful 
and asymptotically efficient in the sense that for any se- 
quence of states ipi...ip n € Ha®'Hb the expected classical 
cost is V ■ log(Ajd) + 0(1) bits. 

As with unentangled states, causality sets a lower 
bound on the classical cost of RSP for entangled states. 
The cost of RSP for a set of states ipi...ip n must be at 
least S(p) - T l T, T i=i S (Pi) bits ' where pi = tr A ( |Vi> <"0i I ) 
and p = — X)*Li Pii because the states could be asymp- 
totically used to encode that much classical information 
We are investigating how closely this bound can be 
approached. 

RSP can be generalized to multiparty scenarios. For 
example one may ask whether Alice, using prior entan- 
glement shared separately with Bob and Charlie, can re- 
motely prepare an arbitrary tripartite state by sending 
< logds bits to Bob and < logdc bits to Charlie. 
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